Passy privacy policy

LAST UPDATED · OCTOBER 7, 2026

Passy is a personal passport for the places that matter to you. It is built to be private: no ads, no tracking, and we never sell your data.

This policy explains what Passy does with your information. Passy is made by Blessing Ibhagbosoria ("we", "us"). If anything here is unclear, email support@getpassy.com.

The short version

Your passport lives on your iPhone. Signing in is optional.
If you sign in with Apple, your passport is backed up so you can restore it on a new phone, and you can connect with people and share places and trips with them.
Nothing is shared with anyone until you choose to share it, place by place or trip by trip.
Passy has no ads, no analytics and no tracking. We never sell your data or use it for advertising.
Your location is used only on your iPhone, and only if you turn on Nearby wishlist.
You can delete everything at any time with Delete account.

What Passy stores on your iPhone

Your passport: the name, photo, home city, passport colour and preferences you enter.
Places and trips: names, locations, categories, dates, ratings, notes, itineraries, packing lists and memories you add.
Tickets: flights, tickets and stays you add, including any booking codes you type in.
Photos: only the pictures you choose. Passy can't browse your photo library.
Stamps and badges: created from the places you mark as visited.

This stays in Passy's storage on your iPhone. It may be included in your iCloud or computer backup if you have those turned on; Apple handles that backup, not us. Deleting Passy deletes this data from your iPhone.

If you sign in (optional)

Passy uses Sign in with Apple.

What Apple shares with us: an account identifier and an email address (which can be a private relay address). Apple may share your name the first time you sign in; we only use it to fill in your passport name if it's empty.
What we store: your passport and everything in it listed above, including your photos, so it can be backed up and restored.
Why: to back up your passport, restore it on your devices, and power the sharing features you choose to use. Nothing else.
Where: with our hosting provider, Supabase, on servers in the United States. Data is encrypted in transit, and access rules on the server mean each account can only read its own data, plus whatever other people have chosen to share with it.

Signing out keeps your backup so you can sign back in. Delete account (Profile) permanently removes your account, your data and your photos from our servers.

Connecting with people

Each signed-in passport has a connect code. Someone who enters your code sees only your passport name and passport number, and can send you a request. Nothing else about you is visible to them. You choose whether to accept.

Connecting doesn't share anything by itself. You can remove a connection at any time; doing so stops all sharing between you in both directions and takes each of you off the other's shared trips. Nobody is notified.

What other people can see

Only what you choose to share, and only with the people you choose:

A place you share with someone: they see the place, its visit dates, your rating and note, and its memories and photos. You can stop sharing at any time and it disappears from their phone.
A shared trip: everyone on the trip sees the trip and what anyone adds to it: plans, packing items (and who's bringing what), memories and photos, tickets (including booking codes), and the places in it that are set to "Trip members". They also see the name of whoever added each thing. Places in a shared trip that you keep as "Only me" stay private.
Your name: people you're connected to, or on a trip with, see your passport name.

If you leave a shared trip (or are removed), the plans and packing items you added stay on the trip for the others. Your places, photos and tickets leave the trip with you and stay in your passport.

Notifications

On your iPhone: reminders like "collect your stamps" after a trip are scheduled on your iPhone and never involve our servers.
Push notifications (if you're signed in and allow them): for example "Alex wants to connect" or "Alex added a plan to Lisbon". To send these, we store your phone's push token with your account, and the notification text (which can include a name, place or trip name) is delivered through Apple Push Notification service. You can turn these off in Passy (Profile → People & shared trips) or in iOS Settings.

Location

If you turn on Nearby wishlist, Passy asks for permission to use your location so iOS can tell Passy when you're near a place on your wishlist. This happens on your iPhone: your location is not sent to us or anyone else, and Passy doesn't keep a history of where you've been. Places you add from map search are saved with their map location, which is part of your passport like any other detail.

Place search (Apple Maps)

When you search for a place or your home city, the text you type is sent to Apple Maps. Apple's handling of it is covered by Apple's Privacy Policy. We don't receive your searches.

Purchases

Passy Plus is sold through the App Store. Apple processes your payment; we never see your payment details. Passy only learns from Apple whether your subscription is active.

Crash reports

Passy has no analytics. If you've chosen to share analytics with app developers in iOS Settings, Apple may send us anonymous crash reports, which we use only to fix bugs.

Children

Passy is not directed at children under 13, and we don't knowingly collect information from children under 13. If you believe a child has given us information, email us and we'll delete it.

Your choices and rights

Edit or delete any place, trip, ticket, photo or memory in the app.
Stop sharing a place, leave a trip, or remove a connection at any time.
Turn off location and notifications at any time.
Delete everything on our servers with Delete account, and everything on your phone by deleting the app.
Email support@getpassy.com to ask for a copy of your data, a correction, or deletion. Depending on where you live (for example the EU, UK, California or Canada) you may have further rights under local law; we'll honour them.

How long we keep data

Until you delete it. When you delete something in the app, it's removed from our servers at the next backup. When you delete your account, your data and photos are removed from our servers.

Changes to this policy

If we change this policy, we'll update the date above and, for important changes, let you know in the app before they take effect.

Contact

Blessing Ibhagbosoria · support@getpassy.com · getpassy.com